Static task
static1
Behavioral task
behavioral1
Sample
cf72033c8e93accbecaab02865035190N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cf72033c8e93accbecaab02865035190N.exe
Resource
win10v2004-20240709-en
General
-
Target
cf72033c8e93accbecaab02865035190N.exe
-
Size
2.8MB
-
MD5
cf72033c8e93accbecaab02865035190
-
SHA1
9c113e2dc8df6e316902312df45c22fb832fd938
-
SHA256
32395380025f5920db03cac1d256b33963cfc5cb0c2533ee3869363a46e9b55e
-
SHA512
9e97aec6140191fa5f7a795c693e79c993f95e74207323e9da7a9c2f8270685f737aacc54c2f651793cc5a8f40bfd580d45309cc0d27d6ba1a80562b23a727d0
-
SSDEEP
49152:V5tu1ebiRQTzFICw3Zg7f17Umu1IsrAer5mxMTVOSB3RS:V5tu1ebzWCwe7f1Umu1jrt5moVw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf72033c8e93accbecaab02865035190N.exe
Files
-
cf72033c8e93accbecaab02865035190N.exe.exe windows:5 windows x86 arch:x86
138315f1eab5d9eeb2dff11db4af0600
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
Imports
comctl32
ImageList_Destroy
_TrackMouseEvent
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
GetVersionExW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedExchange
IsProcessorFeaturePresent
LoadLibraryW
LoadResource
LockResource
lstrlenA
lstrlenW
MultiByteToWideChar
OpenEventW
OpenMutexW
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
GetVersionExA
WaitForSingleObject
WideCharToMultiByte
WriteFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
HeapCreate
GetEnvironmentVariableA
TlsGetValue
TlsAlloc
TlsSetValue
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcess
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryW
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleW
GetModuleFileNameW
GetLocalTime
GetLocaleInfoA
GetLastError
GetFileSize
GetFileInformationByHandle
GetExitCodeThread
GetExitCodeProcess
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCommandLineW
GetACP
FreeResource
FreeLibrary
FlushInstructionCache
FindResourceW
FindResourceExW
FileTimeToSystemTime
DeleteCriticalSection
CreateMutexW
CreateFileW
CopyFileW
CloseHandle
GetStartupInfoW
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
VirtualFree
user32
MessageBoxA
SetWindowRgn
SetWindowPos
SetWindowLongW
SetTimer
SetRectEmpty
SetRect
SetForegroundWindow
SetFocus
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendMessageW
ScreenToClient
ReleaseCapture
RegisterWindowMessageW
RegisterClassExW
PtInRect
PostThreadMessageW
PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
MoveWindow
VkKeyScanA
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsWindowVisible
IsWindowEnabled
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
ReleaseDC
GetDC
AttachThreadInput
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetScrollPos
GetParent
GetNextDlgTabItem
GetMessageW
WindowFromPoint
UpdateWindow
UnregisterClassA
BeginPaint
BringWindowToTop
TranslateMessage
SystemParametersInfoW
ShowWindow
MapWindowPoints
SetWindowTextW
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetCursorPos
GetClipboardData
GetClientRect
GetClassInfoExW
GetActiveWindow
FindWindowW
FindWindowExW
FillRect
EqualRect
EndPaint
EnableWindow
DrawTextW
DrawIconEx
DrawFrameControl
DispatchMessageW
DestroyWindow
DestroyIcon
DestroyCursor
DefWindowProcW
CreateWindowExW
CopyRect
CloseClipboard
ClientToScreen
CallWindowProcW
IsWindow
gdi32
CreateFontIndirectW
CreatePen
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
ExtSelectClipRgn
ExtTextOutW
GetClipRgn
GetCurrentObject
GetObjectW
GetStockObject
GetTextColor
CreateDIBSection
GetViewportOrgEx
LineTo
MoveToEx
OffsetRgn
Rectangle
RectInRegion
RestoreDC
SaveDC
SelectObject
SetBkColor
SetBkMode
SetStretchBltMode
SetTextColor
SetViewportOrgEx
StretchBlt
TextOutW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CombineRgn
BitBlt
GetTextExtentPoint32W
GetDeviceCaps
comdlg32
CommDlgExtendedError
GetOpenFileNameW
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
shell32
ShellExecuteW
ShellExecuteExW
ole32
CreateStreamOnHGlobal
shlwapi
PathAddBackslashW
PathFileExistsW
StrToIntA
StrToIntW
Sections
.text Size: 752KB - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_nhead_6 Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_ohead_6 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE